$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa File: 6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa (raw, json) Hash identifier: Xa1J7yYTxOgzMpZRRjjio98bZwk/y/1d2UJa2mrod94= Subject key identifier: 05:5B:52:4C:AE:16:7F:63:D3:30:03:32:56:B8:68:D8:CF:22:AC:BD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FD08969A6C1B2FB11FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fd:08:96:9a:6c:1b:2f:b1:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=f12a854a-7834-4ec3-b673-78bb299c86d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:10:fa:76:f3:2a:6d:dc:8a:e9:70:97:96:c5: 5d:00:fa:05:19:5f:3e:b1:4b:c9:e4:af:b8:85:ef: c0:7a:4e:8a:c5:f6:56:b4:da:54:37:ef:07:e7:e4: c6:b7:17:e4:bc:33:cf:17:35:f0:5e:7c:55:37:96: ad:77:cb:20:d4:b8:7c:c0:c3:73:36:bd:68:6b:23: 4a:19:a7:7e:ed:07:4d:d2:0e:68:54:58:be:ab:3f: 4b:fe:29:ad:ee:a4:65:a7:0d:c8:0c:d7:e5:7e:db: bb:1f:08:61:4d:80:68:2e:eb:04:ba:cb:e4:5d:0f: 46:68:3c:79:5a:a2:77:34:b8:4c:e8:86:a4:0a:c0: b7:b6:1e:e7:12:42:6d:60:ed:ac:61:54:83:d7:e6: 2f:95:8b:04:f2:f6:08:58:a7:7e:c1:1b:a6:b9:c5: 69:fc:b2:31:99:b8:6f:47:45:6e:b4:72:a6:ed:14: 27:68:d0:c5:89:6f:db:38:49:a5:15:7c:f2:e2:26: 9e:b4:88:a2:f3:fb:a0:90:77:fc:3e:47:7d:0a:62: 03:4b:32:73:49:92:9a:24:fe:50:94:fa:0f:4e:9a: d0:61:d0:82:f7:19:cd:b1:70:4a:83:56:1e:33:a0: 4b:a1:e1:23:9e:4e:26:72:f6:06:4b:41:90:13:37: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5B:52:4C:AE:16:7F:63:D3:30:03:32:56:B8:68:D8:CF:22:AC:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:63:27:dc:0b:1f:b3:80:f1:7d:f7:7d:c9:01:ba:d4:81:11: da:5d:63:57:ad:3a:f8:f8:80:23:81:1d:8e:b0:6a:ff:ee:ef: 42:ca:99:51:db:82:b1:0f:7c:6a:2e:e2:af:80:02:07:57:6c: f9:12:37:91:23:4f:ee:6b:25:ea:30:25:73:d8:7a:45:60:dc: 7c:8e:3f:67:30:49:10:5d:5f:7f:d5:8f:1f:bc:e2:4a:f5:3b: e8:54:4c:64:58:81:c3:73:8e:4b:d7:06:e1:bd:34:98:e0:79: b9:1d:fa:5b:1d:8f:f8:77:7b:55:46:f1:4b:1f:70:93:99:38: 01:f8:95:1e:ec:fa:94:8d:74:3b:fa:9f:4c:c5:e8:3e:0b:c6: 5b:8a:49:47:4a:44:fd:67:04:d5:94:f1:13:80:aa:4f:7c:3d: ae:49:6e:ef:c1:48:50:0c:46:e6:0b:be:f9:e6:b4:bc:48:7a: 17:e5:17:dd:d2:17:67:92:13:47:72:3a:27:93:bb:4f:8c:4c: 43:0e:65:93:49:0b:a2:63:55:c8:9d:32:91:57:12:ed:4d:32: 79:86:73:d9:79:f8:a2:6c:b6:54:a8:33:9e:d5:d1:9a:59:95: 93:a4:64:e7:75:d3:ed:9f:5d:77:2f:38:49:fe:9f:e7:05:63: 6d:fc:67:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZv0IlppsGy+xH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjEyYTg1NGEtNzgzNC00ZWMzLWI2NzMtNzhiYjI5OWM4NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBD6dvMqbdyK6XCXlsVdAPoFGV8+sUvJ5K+4 he/Aek6KxfZWtNpUN+8H5+TGtxfkvDPPFzXwXnxVN5atd8sg1Lh8wMNzNr1oayNK Gad+7QdN0g5oVFi+qz9L/imt7qRlpw3IDNflftu7HwhhTYBoLusEusvkXQ9GaDx5 WqJ3NLhM6IakCsC3th7nEkJtYO2sYVSD1+YvlYsE8vYIWKd+wRumucVp/LIxmbhv R0VutHKm7RQnaNDFiW/bOEmlFXzy4iaetIii8/ugkHf8Pkd9CmIDSzJzSZKaJP5Q lPoPTprQYdCC9xnNsXBKg1YeM6BLoeEjnk4mcvYGS0GQEzfpHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVbUkyuFn9j0zADMla4aNjPIqy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjkwOWYzYTUtNmM5NC0z YTBjLTk5OGQtNWJmMGI2MDAzOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJjJ9wLH7OA8X33fckButSBEdpdY1etOvj4gCOBHY6wav/u70LKmVHb grEPfGou4q+AAgdXbPkSN5EjT+5rJeowJXPYekVg3HyOP2cwSRBdX3/Vjx+84kr1 O+hUTGRYgcNzjkvXBuG9NJjgebkd+lsdj/h3e1VG8UsfcJOZOAH4lR7s+pSNdDv6 n0zF6D4LxluKSUdKRP1nBNWU8ROAqk98Pa5Jbu/BSFAMRuYLvvnmtLxIehflF93S F2eSE0dyOieTu0+MTEMOZZNJC6JjVcidMpFXEu1NMnmGc9l5+KJstlSoM57V0ZpZ lZOkZOd10+2fXXcvOEn+n+cFY238Zx0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:28 2025 by rpki-client